Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
File:                     32332e3134352e34382e302f32342d3234203d3e20323031313036.roa (raw, json)
Hash identifier:          4pOj9fyuxLmUZgFM45l0eHOG/vjBtNj9eaH8TXfz9xA=
Subject key identifier:   E4:10:38:71:38:BC:A3:45:05:B2:76:DF:73:DC:8A:70:95:71:29:27
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       563A273E205733C85ABEC231B5D5259119E9DA1A
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa
Signing time:             Wed 03 Jun 2026 16:56:14 +0000
ROA not before:           Wed 03 Jun 2026 16:51:14 +0000
ROA not after:            Wed 02 Jun 2027 16:56:14 +0000
asID:                     201106
IP address blocks:        23.145.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:27:3e:20:57:33:c8:5a:be:c2:31:b5:d5:25:91:19:e9:da:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Jun  3 16:51:14 2026 GMT
            Not After : Jun  2 16:56:14 2027 GMT
        Subject: CN=E410387138BCA34505B276DF73DC8A7095712927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:bb:fc:40:da:62:be:c5:a6:c7:4e:87:d8:
                    82:57:6d:86:94:a4:aa:0b:c2:1c:02:e2:79:d9:38:
                    e6:74:e8:e8:7b:4c:22:9b:5d:20:d2:1b:6b:85:1c:
                    56:13:43:38:f4:4e:a1:aa:97:6c:ad:51:99:4e:52:
                    67:65:64:8f:6d:5a:fa:b7:97:9b:21:c4:6c:8e:99:
                    ea:56:d8:49:75:27:f3:3a:c7:3b:22:85:0a:30:39:
                    5d:21:a2:38:bb:e8:ac:0d:c2:99:4d:b7:ec:12:19:
                    51:fc:bc:1b:31:d1:5a:42:11:10:c1:73:f4:6f:11:
                    3d:b0:01:56:fe:4b:c3:bc:23:2d:ef:6d:a8:65:a3:
                    46:7c:ca:cb:43:8c:ae:fa:17:c7:92:0d:ea:38:49:
                    29:aa:96:c3:58:97:67:39:f6:93:bc:a0:1b:4c:43:
                    79:4e:ee:31:3f:e5:54:92:2e:34:df:21:5e:24:ed:
                    3e:89:8f:40:c6:d2:01:30:33:ed:64:9d:7a:01:e0:
                    97:27:6a:37:68:b8:73:49:34:37:db:20:1f:54:74:
                    9e:8c:ec:99:a6:80:d8:ff:28:9d:e3:02:21:a1:74:
                    7d:95:b8:24:b9:7e:6f:c4:9b:0c:e0:90:00:ea:06:
                    ff:94:98:ff:a2:c2:76:36:5f:77:56:7c:cc:b0:4e:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:10:38:71:38:BC:A3:45:05:B2:76:DF:73:DC:8A:70:95:71:29:27
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:96:5a:d0:85:c5:44:fe:cc:71:21:8f:cd:93:ab:d0:d8:
         a1:08:94:92:94:b4:ce:7f:af:a2:38:57:2b:79:02:8e:35:1a:
         35:33:11:af:e9:c2:51:11:11:e8:4f:f8:b1:7a:9d:98:df:0a:
         8b:59:12:40:4b:40:1d:2b:28:e9:c7:0e:9a:fc:40:ab:de:b1:
         3a:89:37:e5:07:e3:a2:95:b4:05:6a:35:2f:24:fd:d2:8d:0c:
         ba:51:d6:c5:2d:32:bd:0e:71:3b:df:6c:32:a2:98:03:55:96:
         3f:e7:a2:5b:af:ac:8a:0c:fa:7f:da:df:4f:e5:c2:a6:25:cb:
         07:af:9f:b0:8c:dd:a0:ef:b3:96:78:5c:75:e3:a8:52:69:3d:
         d4:77:de:25:b6:f6:cb:d0:d7:64:92:e9:cc:86:f1:c9:68:b6:
         f2:df:a5:d3:ef:5c:33:68:c5:3f:aa:ae:b5:b4:56:07:0d:21:
         c4:0a:fe:d8:2b:43:43:36:cf:4e:b0:36:f1:46:bb:0b:02:99:
         a7:06:60:a5:78:fa:e5:6e:29:a8:1e:fd:09:91:c4:03:19:23:
         1f:d3:7c:25:2d:ae:fa:93:49:13:3e:99:56:f0:a5:c4:44:b1:
         8f:6a:53:a7:71:f8:37:d0:87:90:b6:55:48:90:33:3d:37:a8:
         05:8f:ce:75
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVjonPiBXM8havsIxtdUlkRnp2howDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNjAzMTY1MTE0WhcNMjcwNjAyMTY1NjE0
WjAzMTEwLwYDVQQDEyhFNDEwMzg3MTM4QkNBMzQ1MDVCMjc2REY3M0RDOEE3MDk1
NzEyOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHG7/EDaYr7F
psdOh9iCV22GlKSqC8IcAuJ52TjmdOjoe0wim10g0htrhRxWE0M49E6hqpdsrVGZ
TlJnZWSPbVr6t5ebIcRsjpnqVthJdSfzOsc7IoUKMDldIaI4u+isDcKZTbfsEhlR
/LwbMdFaQhEQwXP0bxE9sAFW/kvDvCMt722oZaNGfMrLQ4yu+hfHkg3qOEkpqpbD
WJdnOfaTvKAbTEN5Tu4xP+VUki403yFeJO0+iY9AxtIBMDPtZJ16AeCXJ2o3aLhz
STQ32yAfVHSejOyZpoDY/yid4wIhoXR9lbgkuX5vxJsM4JAA6gb/lJj/osJ2Nl93
VnzMsE4w8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOQQOHE4vKNFBbJ233PcinCV
cSknMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzMzJlMzEzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzEzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5Ew
MA0GCSqGSIb3DQEBCwUAA4IBAQClGZZa0IXFRP7McSGPzZOr0NihCJSSlLTOf6+i
OFcreQKONRo1MxGv6cJRERHoT/ixep2Y3wqLWRJAS0AdKyjpxw6a/ECr3rE6iTfl
B+OilbQFajUvJP3SjQy6UdbFLTK9DnE732wyopgDVZY/56Jbr6yKDPp/2t9P5cKm
JcsHr5+wjN2g77OWeFx146hSaT3Ud94ltvbL0NdkkunMhvHJaLby36XT71wzaMU/
qq61tFYHDSHECv7YK0NDNs9OsDbxRrsLApmnBmClePrlbimoHv0JkcQDGSMf03wl
La76k0kTPplW8KXERLGPalOncfg30IeQtlVIkDM9N6gFj851
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:32:29 2026 by rpki-client